Privilege Escalation Vulnerability in Azure Synapse by Microsoft
CVE-2026-48584

9.9CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure Synapse
Vendor
CVE Published:
19 June 2026

What is CVE-2026-48584?

An escalation of privilege vulnerability exists in Azure Synapse, which can be exploited by an authenticated attacker. This flaw allows a malicious actor to gain elevated permissions over the network, potentially compromising sensitive data and system integrity. Communities and organizations utilizing Azure Synapse should review the necessary patches and take action to mitigate any associated risks.

Affected Version(s)

Azure Synapse -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.